Differences between revisions 107 and 108
⇤ ← Revision 107 as of 2020-01-25 00:55:02 →
Size: 26006
Editor: SumanaHarihareswara
Comment: date fix for meeting
← Revision 108 as of 2020-02-10 15:33:27 → ⇥
Size: 20116
Editor: SumanaHarihareswara
Comment: converted from reStructuredText to MoinMoin using libhtml-wikiconverter-moinmoin-perl (used pandoc to convert rST to HTML, then html2wiki --dialect=MoinMoin packagingwg.html > output.wiki)
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
#format rst

Agenda
======
= Packaging Working Group =

The Packaging Working Group is a [[https://www.python.org/psf/committees/#packaging-work-group|work group of the Python Software Foundation]].

== Agenda ==
Line 9: Line 11:
Resources
==========

* Discussion: Slack and mailing list. The archives are set to private since there is voting.
* Accounting: We rely on the PSF's `donation <http://donate.pypi.org/>`_ and accounting mechanisms to raise funds and disburse them to the selected recipients.
* Project ideas: `Fundable Packaging Improvements`_

Governance
==============

Decisions on what fundraising and projects/efforts to support will be done by a
simple majority and in the case of a tie, will escalate to the PSF Board. See `the PSF Packaging WG Charter <PackagingWG/Charter>`_.

Administration and Contact
==========================

* Donald Stufft <donald@python.org> (chair)
* Ewa Jodlowska <ewa@python.org> (co-chair)
* `PSF Packaging WG Charter <PackagingWG/Charter>`_		 == Resources ==

  * Discussion: Slack and mailing list. The archives are set to private since there is voting.
  * Accounting: We rely on the PSF's [[http://donate.pypi.org/|donation]] and accounting mechanisms to raise funds and disburse them to the selected recipients.
  * Project ideas: [[Fundable Packaging Improvements]]

== Governance ==

Decisions on what fundraising and projects/efforts to support will be done by a simple majority and in the case of a tie, will escalate to the PSF Board. See [[PackagingWG/Charter|the PSF Packaging WG Charter]].

== Administration and Contact ==

  * Donald Stufft &lt;[[mailto:donald@python.org|donald@python.org]]&gt; (chair)
  * Ewa Jodlowska &lt;[[mailto:ewa@python.org|ewa@python.org]]&gt; (co-chair)
  * [[PackagingWG/Charter|PSF Packaging WG Charter]]
Line 31: Line 29:
Members
=======

* Donald Stufft
* Ewa Jodlowska
* Nick Coghlan
* Ernest W. Durbin III
* Thea Flowers
* Sumana Harihareswara
* Nicole Harris
* Dustin Ingram
* Kenneth Reitz
* Nathaniel J. Smith
* Jacqueline Kazil (non-voting observer from PSF board)
* Eric Holscher (non-voting observer from PSF board)
* Laura Hampton (non-voting member)
* Jannis Leidel (non-voting observer from PSF board)
* (others will be added as they accept their invitation to the WG)

Meetings
========		 === Members ===

  * Donald Stufft
  * Ewa Jodlowska
  * Nick Coghlan
  * Ernest W. Durbin III
  * Thea Flowers
  * Sumana Harihareswara
  * Nicole Harris
  * Dustin Ingram
  * Kenneth Reitz
  * Nathaniel J. Smith
  * Jacqueline Kazil (non-voting observer from PSF board)
  * Eric Holscher (non-voting observer from PSF board)
  * Laura Hampton (non-voting member)
  * Jannis Leidel (non-voting observer from PSF board)
  * (others will be added as they accept their invitation to the WG)

== Meetings ==
Line 55: Line 51:
Current Projects
================

Fundraising
-----------

The Packaging Working Group is seeking sponsorships and grants to raise funds for `Fundable Packaging Improvements`_.

Sprints
-------

We run PackagingSprints_ at conventions and as standalone events. We're open to companies and organizations hosting sprints and work weeks to help us move packaging forward; get in contact with a Working Group member.

Warehouse: Facebook gift
------------------------

The Packaging Working Group applied for and is receiving a gift from Facebook to implement & deploy security features for Warehouse (PyPI's codebase).

* *Summary*: Cryptographic signing of artifacts, and malware detection. `See announcement blog post <https://pyfound.blogspot.com/2018/12/upcoming-pypi-improvements-for-2019.html>`_, and `the milestone description on GitHub <https://github.com/pypa/warehouse/milestone/16>`_.
* *Schedule*: As of 2 January 2020, the PSF has hired contractors to carry out this work, and has commenced work.
* *Roadmap*: WarehouseRoadmap_
* *Code and discussion*: `GitHub repository for Warehouse <https://github.com/pypa/warehouse/>`_, and `Discourse forum <https://discuss.python.org/c/packaging>`_.
* *Deployment*: `pypi.org <https://pypi.org/>`_.
* *Testing*: To be determined
* *Manager*: Ernest W. Durbin III.
* *Meetings and Updates*: See below.
 == Current Projects ==

=== Fundraising ===

The Packaging Working Group is seeking sponsorships and grants to raise funds for [[Fundable Packaging Improvements]].

=== Sprints ===

We run [[PackagingSprints]] at conventions and as standalone events. We're open to companies and organizations hosting sprints and work weeks to help us move packaging forward; get in contact with a Working Group member.

=== Warehouse: Facebook gift ===

The Packaging Working Group applied for and is receiving a gift from Facebook to implement &amp; deploy security features for Warehouse (PyPI's codebase).

  * ''Summary'': Cryptographic signing of artifacts, and malware detection. [[https://pyfound.blogspot.com/2018/12/upcoming-pypi-improvements-for-2019.html|See announcement blog post]], and [[https://github.com/pypa/warehouse/milestone/16|the milestone description on GitHub]].
  * ''Schedule'': As of 2 January 2020, the PSF has hired contractors to carry out this work, and has commenced work.
  * ''Roadmap'': [[WarehouseRoadmap]]
  * ''Code and discussion'': [[https://github.com/pypa/warehouse/|GitHub repository for Warehouse]], and [[https://discuss.python.org/c/packaging|Discourse forum]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': To be determined
  * ''Manager'': Ernest W. Durbin III.
  * ''Meetings and Updates'': See below.
Line 85: Line 76:
============================================================================================================================================================= ================== ==========================
                  Meeting/update Type Date
============================================================================================================================================================= ================== ==========================
`Scoping Facebook-funded work <PackagingWG/2019-06-20-Warehouse>`_ Meeting notes June 20th, 2019
`Announcement of Request for Information <https://pyfound.blogspot.com/2019/08/pypi-security-q4-2019-request-for.html>`_ Blog post August 28th, 2019
`Announcement of Request for Proposals <https://pyfound.blogspot.com/2019/09/pypi-security-q4-2019-request-for.html>`_ Blog post September 25th, 2019
`Kickoff - 2019 Q4 RFP Milestone 2 - Automated Detection of Malicious Uploads <PackagingWG/2019-12-11-Warehouse>`_ Meeting notes December 11th, 2019
============================================================================================================================================================= ================== ==========================


Dependency resolver for pip
---------------------------

The Packaging Working Group applied for and is receiving funding to work in 2020 on the design, implementation, and rollout of `pip's next-generation dependency resolver <https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Finish_dependency_resolver_for_pip>`_. The donors funding this work are the `Chan Zuckerberg Initiative <https://chanzuckerberg.com/eoss/proposals/improving-user-experience-and-debuggability-of-pip-for-all-python-users/>`_ (USD$200,000) and `Mozilla Open Source Support <https://www.mozilla.org/en-US/moss/>`_ (USD$207,000).

* *Summary*: Complete `pip's next-generation dependency resolver <https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Finish_dependency_resolver_for_pip>`_, and do `user experience research and design to improve pip's usability and debuggability <https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Improve_pip_user_experience>`_
* *Schedule*: As of 13 January 2020, the PSF has chosen contractors to carry out this work, and has commenced work. The work will end in December 2020.
* *Roadmap*: Pip2020DonorFundedRoadmap_
* *Code and discussion*: `GitHub repository for pip <https://github.com/pypa/pip/>`_, `Zulip livechat <https://python.zulipchat.com/#narrow/stream/218659-pip-development>`_, and `Discourse forum <https://discuss.python.org/c/packaging>`_.
* *Testing*: To be determined
* *Manager*: Sumana Harihareswara
* *Meetings and Updates*: See below.
 || Meeting/update || Type || Date ||
|| [[PackagingWG/2019-06-20-Warehouse|Scoping Facebook-funded work]] || Meeting notes || June 20th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/08/pypi-security-q4-2019-request-for.html|Announcement of Request for Information]] || Blog post || August 28th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/09/pypi-security-q4-2019-request-for.html|Announcement of Request for Proposals]] || Blog post || September 25th, 2019 ||
|| [[PackagingWG/2019-12-11-Warehouse|Kickoff - 2019 Q4 RFP Milestone 2 - Automated Detection of Malicious Uploads]] || Meeting notes || December 11th, 2019 ||

=== Dependency resolver for pip ===

The Packaging Working Group applied for and is receiving funding to work in 2020 on the design, implementation, and rollout of [[https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Finish_dependency_resolver_for_pip|pip's next-generation dependency resolver]]. The donors funding this work are the [[https://chanzuckerberg.com/eoss/proposals/improving-user-experience-and-debuggability-of-pip-for-all-python-users/|Chan Zuckerberg Initiative]] (USD$200,000) and [[https://www.mozilla.org/en-US/moss/|Mozilla Open Source Support]] (USD$207,000).

  * ''Summary'': Complete [[https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Finish_dependency_resolver_for_pip|pip's next-generation dependency resolver]], and do [[https://wiki.python.org/psf/Fundable%20Packaging%20Improvements#Improve_pip_user_experience|user experience research and design to improve pip's usability and debuggability]]
  * ''Schedule'': As of 13 January 2020, the PSF has chosen contractors to carry out this work, and has commenced work. The work will end in December 2020.
  * ''Roadmap'': [[Pip2020DonorFundedRoadmap]]
  * ''Code and discussion'': [[https://github.com/pypa/pip/|GitHub repository for pip]], [[https://python.zulipchat.com/#narrow/stream/218659-pip-development|Zulip livechat]], and [[https://discuss.python.org/c/packaging|Discourse forum]].
  * ''Testing'': To be determined
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.
Line 111: Line 96:
============================================================================================================================================================= ================== ==========================
                  Meeting/update Type Date
============================================================================================================================================================= ================== ==========================
`Planning test infrastructure work <PackagingWG/2020-01-23-pip>`_ Meeting notes January 23rd, 2020
`Beginning to plan resolver work <PackagingWG/2020-01-08-pip>`_ Meeting notes January 8th, 2020
`Mozilla and Chan Zuckerberg Initiative to support pip <https://pyfound.blogspot.com/2019/12/moss-czi-support-pip.html>`_ Blog post December 4th, 2019
`Seeking Developers for Paid Contract Improving pip <https://pyfound.blogspot.com/2019/11/seeking-developers-for-paid-contract.html>`_ Blog post November 11th, 2019
============================================================================================================================================================= ================== ==========================


Past projects
=============

Warehouse: OTF grant
--------------------

The Packaging Working Group applied for and received a grant from the Open Technology Fund to implement & deploy security, localization, and accessibility improvements for Warehouse (PyPI's codebase).

* *Summary*: `See March 13 2019 blog post <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_.
* *Roadmap*: `On Read the Docs. <https://warehouse.readthedocs.io/roadmap/>`_
* *Schedule*: Several contractors worked, paid by PSF using the OTF funds, from March 2019 till October 2019. As of 8 October 2019, OTF-funded contractors `have finished security improvements, accessibility and internationalization/localization improvements to Warehouse <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_, and volunteers are working on Milestone 6, "Post Legacy Shutdown".
* *Code*: `GitHub repository <https://github.com/pypa/warehouse/>`_.
* *Deployment*: `pypi.org <https://pypi.org/>`_.
* *Testing*: WarehousePackageMaintainerTesting_
* *Manager*: Sumana Harihareswara
* *Meetings and Updates*: See below.
 || Meeting/update || Type || Date ||
|| [[PackagingWG/2020-01-23-pip|Planning test infrastructure work]] || Meeting notes || January 23rd, 2020 ||
|| [[PackagingWG/2020-01-08-pip|Beginning to plan resolver work]] || Meeting notes || January 8th, 2020 ||
|| [[https://pyfound.blogspot.com/2019/12/moss-czi-support-pip.html|Mozilla and Chan Zuckerberg Initiative to support pip]] || Blog post || December 4th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/11/seeking-developers-for-paid-contract.html|Seeking Developers for Paid Contract Improving pip]] || Blog post || November 11th, 2019 ||

== Past projects ==

=== Warehouse: OTF grant ===

The Packaging Working Group applied for and received a grant from the Open Technology Fund to implement &amp; deploy security, localization, and accessibility improvements for Warehouse (PyPI's codebase).

  * ''Summary'': [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|See March 13 2019 blog post]].
  * ''Roadmap'': [[https://warehouse.readthedocs.io/roadmap/|On Read the Docs.]]
  * ''Schedule'': Several contractors worked, paid by PSF using the OTF funds, from March 2019 till October 2019. As of 8 October 2019, OTF-funded contractors [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|have finished security improvements, accessibility and internationalization/localization improvements to Warehouse]], and volunteers are working on Milestone 6, "Post Legacy Shutdown".
  * ''Code'': [[https://github.com/pypa/warehouse/|GitHub repository]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': [[WarehousePackageMaintainerTesting]]
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.
Line 141: Line 119:

============================================================================================================================================================= ================== ==========================
                  Meeting/update Type Date
============================================================================================================================================================= ================== ==========================
`Start using 2FA and API Tokens on PyPI <https://pyfound.blogspot.com/2020/01/start-using-2fa-and-api-tokens-on-pypi.html>`_ Blog post January 17th, 2020
`API tokens and all 2FA methods are out of beta <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/49>`_ Forum post January 17th, 2020
`Concluding report on localisation and accessibility work <https://discuss.python.org/t/pypi-localization-accessibility-progress/2284/4>`_ Forum post October 8th, 2019
`Early Sept. update on accessibility & localisation work <https://discuss.python.org/t/pypi-localization-accessibility-progress/2284>`_ Forum post September 8th, 2019
`Early September update on security work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/47>`_ Forum post September 8th, 2019
`Prioritizing and estimating security, l10n and a11y work <PackagingWG/2019-08-29-Warehouse>`_ Meeting notes August 29th, 2019
`Inspect PyPI event logs to audit your account's and project's security <https://blog.python.org/2019/08/inspect-pypi-event-logs-audit-security.html>`_ Blog post August 15th, 2019
`Early Aug. update on 2FA, API keys, audit log, & a11y work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/43>`_ Forum post August 6th, 2019
`Prioritizing API token and 2FA issues <PackagingWG/2019-08-02-Warehouse>`_ Meeting notes August 2nd, 2019
`Audit log design planning <PackagingWG/2019-07-31-Warehouse>`_ Meeting notes July 31st, 2019
`PyPI now supports uploading via API token <https://blog.python.org/2019/07/pypi-now-supports-uploading-via-api.html>`_ Blog post July 31st, 2019
`preliminary announcement of API token beta <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/31>`_ Forum post July 25th, 2019
`Mid-July update on 2FA, API keys, and a11y work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/29>`_ Forum post July 17th, 2019
`Early July update on 2FA, API keys, and a11y work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/27>`_ Forum post July 3rd, 2019
`API key design planning <PackagingWG/2019-06-24-Warehouse>`_ Meeting notes June 24th, 2019
`PyPI Now Supports Two-Factor Login via WebAuthn <https://pyfound.blogspot.com/2019/06/pypi-now-supports-two-factor-login-via.html>`_ Blog post June 18th, 2019
`Early June update on WebAuthn and accessibility work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/23>`_ Forum post June 8th, 2019
`Initial a11y and i18n planning <PackagingWG/2019-06-07-Warehouse>`_ Meeting notes June 7th, 2019
`Use two-factor auth to improve your PyPI account's security <https://pyfound.blogspot.com/2019/05/use-two-factor-auth-to-improve-your.html>`_ Blog post May 30th, 2019
`Late May update on TOTP and WebAuthN work <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/17>`_ Forum post May 22nd, 2019
`PyPI two-factor auth (2FA) trial May 3-20 <https://mail.python.org/archives/list/distutils-sig@python.org/thread/JMOBWXWYC2EFYB5JBFMXWBEGD4EAD3CC/>`_ Mailing list post May 2nd, 2019
`(cross-post) PyPI two-factor auth (2FA) trial May 3-20 <https://discuss.python.org/t/pypi-two-factor-auth-2fa-trial-may-3-20/1590>`_ Forum post May 2nd, 2019
`Early April update on work and request for advice <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/10?>`_ Forum post April 3rd, 2019
`PyPI security work: multifactor auth progress & help needed <https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042>`_ Forum post March 22nd, 2019
`Prioritizing extant security issues <PackagingWG/2019-03-22-Warehouse>`_ Meeting notes March 22nd, 2019
`Starting security, a11y, & i18n improvements to PyPI for 2019 <http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html>`_ Blog post March 13th, 2019
`Kickoff planning meeting with grant-funded team <PackagingWG/2019-03-11-Warehouse>`_ Meeting notes March 11th, 2019
============================================================================================================================================================= ================== ==========================



Warehouse rollout
-----------------

The Packaging Working Group supported the implementation & deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered `legacy PyPI <https://github.com/pypa/pypi-legacy>`_. `Announced on PSF blog in January 2016 <https://pyfound.blogspot.com/2016/01/welcome-to-warehouse.html>`_; see its history in `this April 2018 LWN article <https://lwn.net/Articles/751458/>`_.

* *Summary*: `PSF blog post about the MOSS grant <https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html>`_.
* *Roadmap*: WarehouseRoadmap_. As of 30 April 2018, the Warehouse team has shut down the legacy PyPI installation, and -- on a volunteer basis -- is working on Milestone 6, "Post Legacy Shutdown".
* *Code*: `GitHub repository <https://github.com/pypa/warehouse/>`_.
* *Deployment*: `pypi.org <https://pypi.org/>`_.
* *Testing*: See `the PSF blog post about testing for the beta <https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html#test>`_. (Previously: WarehousePackageMaintainerTesting_, `PSF blog post about testing package maintainer functionality <https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html>`_.)
* *Manager*: Sumana Harihareswara
* *Meetings and Updates*: See below.
 || Meeting/update || Type || Date ||
|| [[https://pyfound.blogspot.com/2020/01/start-using-2fa-and-api-tokens-on-pypi.html|Start using 2FA and API Tokens on PyPI]] || Blog post || January 17th, 2020 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/49|API tokens and all 2FA methods are out of beta]] || Forum post || January 17th, 2020 ||
|| [[https://discuss.python.org/t/pypi-localization-accessibility-progress/2284/4|Concluding report on localisation and accessibility work]] || Forum post || October 8th, 2019 ||
|| [[https://discuss.python.org/t/pypi-localization-accessibility-progress/2284|Early Sept. update on accessibility &amp; localisation work]] || Forum post || September 8th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/47|Early September update on security work]] || Forum post || September 8th, 2019 ||
|| [[PackagingWG/2019-08-29-Warehouse|Prioritizing and estimating security, l10n and a11y work]] || Meeting notes || August 29th, 2019 ||
|| [[https://blog.python.org/2019/08/inspect-pypi-event-logs-audit-security.html|Inspect PyPI event logs to audit your account's and project's security]] || Blog post || August 15th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/43|Early Aug. update on 2FA, API keys, audit log, &amp; a11y work]] || Forum post || August 6th, 2019 ||
|| [[PackagingWG/2019-08-02-Warehouse|Prioritizing API token and 2FA issues]] || Meeting notes || August 2nd, 2019 ||
|| [[PackagingWG/2019-07-31-Warehouse|Audit log design planning]] || Meeting notes || July 31st, 2019 ||
|| [[https://blog.python.org/2019/07/pypi-now-supports-uploading-via-api.html|PyPI now supports uploading via API token]] || Blog post || July 31st, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/31|preliminary announcement of API token beta]] || Forum post || July 25th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/29|Mid-July update on 2FA, API keys, and a11y work]] || Forum post || July 17th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/27|Early July update on 2FA, API keys, and a11y work]] || Forum post || July 3rd, 2019 ||
|| [[PackagingWG/2019-06-24-Warehouse|API key design planning]] || Meeting notes || June 24th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/06/pypi-now-supports-two-factor-login-via.html|PyPI Now Supports Two-Factor Login via WebAuthn]] || Blog post || June 18th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/23|Early June update on WebAuthn and accessibility work]] || Forum post || June 8th, 2019 ||
|| [[PackagingWG/2019-06-07-Warehouse|Initial a11y and i18n planning]] || Meeting notes || June 7th, 2019 ||
|| [[https://pyfound.blogspot.com/2019/05/use-two-factor-auth-to-improve-your.html|Use two-factor auth to improve your PyPI account's security]] || Blog post || May 30th, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/17|Late May update on TOTP and WebAuthN work]] || Forum post || May 22nd, 2019 ||
|| [[https://mail.python.org/archives/list/distutils-sig@python.org/thread/JMOBWXWYC2EFYB5JBFMXWBEGD4EAD3CC/|PyPI two-factor auth (2FA) trial May 3-20]] || Mailing list post || May 2nd, 2019 ||
|| [[https://discuss.python.org/t/pypi-two-factor-auth-2fa-trial-may-3-20/1590|(cross-post) PyPI two-factor auth (2FA) trial May 3-20]] || Forum post || May 2nd, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/10?|Early April update on work and request for advice]] || Forum post || April 3rd, 2019 ||
|| [[https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042|PyPI security work: multifactor auth progress &amp; help needed]] || Forum post || March 22nd, 2019 ||
|| [[PackagingWG/2019-03-22-Warehouse|Prioritizing extant security issues]] || Meeting notes || March 22nd, 2019 ||
|| [[http://pyfound.blogspot.com/2019/03/commencing-security-accessibility-and.html|Starting security, a11y, &amp; i18n improvements to PyPI for 2019]] || Blog post || March 13th, 2019 ||
|| [[PackagingWG/2019-03-11-Warehouse|Kickoff planning meeting with grant-funded team]] || Meeting notes || March 11th, 2019 ||

=== Warehouse rollout ===

The Packaging Working Group supported the implementation &amp; deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered [[https://github.com/pypa/pypi-legacy|legacy PyPI]]. [[https://pyfound.blogspot.com/2016/01/welcome-to-warehouse.html|Announced on PSF blog in January 2016]]; see its history in [[https://lwn.net/Articles/751458/|this April 2018 LWN article]].

  * ''Summary'': [[https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html|PSF blog post about the MOSS grant]].
  * ''Roadmap'': [[WarehouseRoadmap]]. As of 30 April 2018, the Warehouse team has shut down the legacy PyPI installation, and -- on a volunteer basis -- is working on Milestone 6, "Post Legacy Shutdown".
  * ''Code'': [[https://github.com/pypa/warehouse/|GitHub repository]].
  * ''Deployment'': [[https://pypi.org/|pypi.org]].
  * ''Testing'': See [[https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html#test|the PSF blog post about testing for the beta]]. (Previously: [[WarehousePackageMaintainerTesting]], [[https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html|PSF blog post about testing package maintainer functionality]].)
  * ''Manager'': Sumana Harihareswara
  * ''Meetings and Updates'': See below.
Line 192: Line 162:

========================================================================================================================================================== ================== ==========================
                  Meeting/update Type Date
========================================================================================================================================================== ================== ==========================
`PSF announcement of $170,000 MOSS award to improve sustainability of PyPI <https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html>`_ Blog post November 27, 2017
`Kickoff meeting <PackagingWG/2017-12-04-Warehouse>`_ Meeting notes Monday, Dec. 4, 2017
`Kickoff/milestone update <https://mail.python.org/pipermail/distutils-sig/2017-December/031803.html>`_ Mailing list post Thursday, Dec. 7, 2017
Developer experience audit walkthrough in-person meeting Tuesday, December 12, 2017
`Maintainer MVP milestone bug triage <PackagingWG/2017-12-19-Warehouse>`_ Meeting notes Tuesday, Dec. 19, 2017
`Maintainer MVP milestone schedule discussion <PackagingWG/2018-01-10-Warehouse>`_ Meeting notes January 10, 2018
`Mid-January progress <https://groups.google.com/forum/#!topic/pypa-dev/u-RSxosXQh4>`_ Mailing list post Jan. 15, 2018
`Role management and welcoming first-time contributors <https://groups.google.com/forum/#!topic/pypa-dev/f7VZ_gh5Je0>`_ Mailing list post Jan. 23, 2018
`Standup, bug triage, and milestone schedule discussion <PackagingWG/2018-01-29-Warehouse>`_ Meeting notes January 29, 2018
`Late January progress <https://groups.google.com/forum/#!topic/pypa-dev/es_-fC-sdpk>`_ Mailing list post Jan. 30, 2018
`Standup, bug triage, milestone schedule discussion <PackagingWG/2018-02-05-Warehouse>`_ Meeting notes February 5, 2018
`Warehouse update: still on track, new features <https://groups.google.com/forum/#!topic/pypa-dev/OuFoQqo8ajA>`_ Mailing list post Feb. 6, 2018
`Standup/bug triage/milestone schedule update meeting <PackagingWG/2018-02-12-Warehouse>`_ Meeting notes Feb. 12th, 2018
`Warehouse: package manager features & question about advertising <https://groups.google.com/forum/#!topic/pypa-dev/xQb5RvDb5rc>`_ Mailing list post Feb. 13, 2018
`Standup, bug triage, & milestone schedule update meeting <PackagingWG/2018-02-20-Warehouse>`_ Meeting notes Feb. 20th, 2018
`Warehouse: essential maintainer features & next steps <https://mail.python.org/pipermail/distutils-sig/2018-February/032013.html>`_ Mailing list post Feb. 21st, 2018
`Standup, bug triage, and milestone schedule update meeting <PackagingWG/2018-02-26-Warehouse>`_ Meeting notes Feb. 26th, 2018
`Python package maintainers, help test the new PyPI! <https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html>`_ Blog post Feb. 26th, 2018
`Warehouse update: a week of testing, polish, & infrastructure <https://mail.python.org/pipermail/distutils-sig/2018-February/032020.html>`_ Mailing list post Feb. 27th, 2018
`Planning meeting <PackagingWG/2018-03-06-Warehouse>`_ Meeting notes March 6th, 2018
`PyPI & Warehouse update: redirecting & shutting down legacy by end of April <https://groups.google.com/forum/#!topic/pypa-dev/L9sF30_Yr2A>`_ Mailing list post March 7th, 2018
`Core Warehouse developers' planning meeting <PackagingWG/2018-03-12-Warehouse>`_ Meeting notes March 12th, 2018
`new stuff overview, beta next week, user tests, & other Warehouse updates <https://mail.python.org/pipermail/distutils-sig/2018-March/032043.html>`_ Mailing list post March 14th, 2018
`Planning meeting with core Warehouse developers <PackagingWG/2018-03-19-Warehouse>`_ Meeting notes March 19th, 2018
`PyPI/Warehouse: infrastructure hardening & the CAPTCHA conundrum <https://mail.python.org/pipermail/distutils-sig/2018-March/032065.html>`_ Mailing list post March 20th, 2018
`Weekly planning meeting with core Warehouse developers <PackagingWG/2018-03-26-Warehouse>`_ Meeting notes March 20th, 2018
`Warehouse: All New PyPI is now in beta <https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html>`_ Blog post March 26th, 2018
`The all new Python Package Index is now in beta at pypi.org <https://blog.python.org/2018/03/the-all-new-python-package-index-is-now.html>`_ Blog post March 26th, 2018
`beta, pythonhosted docs, PEP 541 <https://mail.python.org/pipermail/distutils-sig/2018-March/032100.html>`_ Mailing list post March 28th, 2018
`Early April planning meeting with core Warehouse developers <PackagingWG/2018-04-02-Warehouse>`_ Meeting notes April 2nd, 2018
`PyPI/Warehouse update: new advice & launch, shutdown dates <https://mail.python.org/pipermail/distutils-sig/2018-April/032120.html>`_ Mailing list post April 3rd, 2018
`Mid-April planning meeting with core Warehouse developers <PackagingWG/2018-04-10-Warehouse>`_ Meeting notes April 10th, 2018
`PyPI/Warehouse (short) weekly report: Progress towards launch milestone <https://mail.python.org/pipermail/distutils-sig/2018-April/032143.html>`_ Mailing list post April 10th, 2018
`Summary of PyPI overhaul in new LWN article <https://mail.python.org/pipermail/distutils-sig/2018-April/032154.html>`_ Mailing list post April 11th, 2018
`Next Generation PyPI rollout incident report <https://status.python.org/incidents/mgjw1g5yjy5j>`_ Statuspage report April 16th, 2018
`New PyPI launched, legacy PyPI shutting down April 30 <https://blog.python.org/2018/04/new-pypi-launched-legacy-pypi-shutting.html>`_ Blog post April 16th, 2018
`Post-launch planning with core Warehouse developers <PackagingWG/2018-04-17-Warehouse>`_ Meeting notes April 17th, 2018
`Warehouse/PyPI update: launch, project wrapup approaching <https://groups.google.com/forum/#!topic/pypa-dev/MBa5300VlI8>`_ Mailing list post April 18th, 2018
`Pre-legacy-shutdown planning with core Warehouse developers <PackagingWG/2018-04-23-Warehouse>`_ Meeting notes April 23rd, 2018
`PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding <https://groups.google.com/forum/#!topic/pypa-dev/zzaTiAoQrA0>`_ Mailing list post April 24th, 2018
`Python legacy sunsetting <https://status.python.org/incidents/ptvp1wnn0jmq>`_ Statuspage report April 30th, 2018
`legacy.pypi.org shutdown notice <https://mail.python.org/mm3/archives/list/distutils-sig@python.org/thread/YREMU56QKRMTTFBFVFJ2B4EHOEKOJZFJ/>`_ Mailing list post April 30th, 2018
`End-of-project conference call <PackagingWG/2018-04-30-Warehouse>`_ Meeting notes April 30th, 2018
`Final weekly report: legacy is shut down <https://mail.python.org/mm3/archives/list/distutils-sig@python.org/message/EUCKR3LP6WSH3ZY3YHIXDHYHF6R3HFJE/>`_ Mailing list post May 1, 2018
========================================================================================================================================================== ================== ==========================		 || Meeting/update || Type || Date ||
|| [[https://pyfound.blogspot.com/2017/11/the-psf-awarded-moss-grant-pypi.html|PSF announcement of $170,000 MOSS award to improve sustainability of PyPI]] || Blog post || November 27, 2017 ||
|| [[PackagingWG/2017-12-04-Warehouse|Kickoff meeting]] || Meeting notes || Monday, Dec. 4, 2017 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2017-December/031803.html|Kickoff/milestone update]] || Mailing list post || Thursday, Dec. 7, 2017 ||
|| Developer experience audit walkthrough || in-person meeting || Tuesday, December 12, 2017 ||
|| [[PackagingWG/2017-12-19-Warehouse|Maintainer MVP milestone bug triage]] || Meeting notes || Tuesday, Dec. 19, 2017 ||
|| [[PackagingWG/2018-01-10-Warehouse|Maintainer MVP milestone schedule discussion]] || Meeting notes || January 10, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/u-RSxosXQh4|Mid-January progress]] || Mailing list post || Jan. 15, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/f7VZ_gh5Je0|Role management and welcoming first-time contributors]] || Mailing list post || Jan. 23, 2018 ||
|| [[PackagingWG/2018-01-29-Warehouse|Standup, bug triage, and milestone schedule discussion]] || Meeting notes || January 29, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/es_-fC-sdpk|Late January progress]] || Mailing list post || Jan. 30, 2018 ||
|| [[PackagingWG/2018-02-05-Warehouse|Standup, bug triage, milestone schedule discussion]] || Meeting notes || February 5, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/OuFoQqo8ajA|Warehouse update: still on track, new features]] || Mailing list post || Feb. 6, 2018 ||
|| [[PackagingWG/2018-02-12-Warehouse|Standup/bug triage/milestone schedule update meeting]] || Meeting notes || Feb. 12th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/xQb5RvDb5rc|Warehouse: package manager features &amp; question about advertising]] || Mailing list post || Feb. 13, 2018 ||
|| [[PackagingWG/2018-02-20-Warehouse|Standup, bug triage, &amp; milestone schedule update meeting]] || Meeting notes || Feb. 20th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-February/032013.html|Warehouse: essential maintainer features &amp; next steps]] || Mailing list post || Feb. 21st, 2018 ||
|| [[PackagingWG/2018-02-26-Warehouse|Standup, bug triage, and milestone schedule update meeting]] || Meeting notes || Feb. 26th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/02/python-package-maintainers-help-test.html|Python package maintainers, help test the new PyPI!]] || Blog post || Feb. 26th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-February/032020.html|Warehouse update: a week of testing, polish, &amp; infrastructure]] || Mailing list post || Feb. 27th, 2018 ||
|| [[PackagingWG/2018-03-06-Warehouse|Planning meeting]] || Meeting notes || March 6th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/L9sF30_Yr2A|PyPI &amp; Warehouse update: redirecting &amp; shutting down legacy by end of April]] || Mailing list post || March 7th, 2018 ||
|| [[PackagingWG/2018-03-12-Warehouse|Core Warehouse developers' planning meeting]] || Meeting notes || March 12th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032043.html|new stuff overview, beta next week, user tests, &amp; other Warehouse updates]] || Mailing list post || March 14th, 2018 ||
|| [[PackagingWG/2018-03-19-Warehouse|Planning meeting with core Warehouse developers]] || Meeting notes || March 19th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032065.html|PyPI/Warehouse: infrastructure hardening &amp; the CAPTCHA conundrum]] || Mailing list post || March 20th, 2018 ||
|| [[PackagingWG/2018-03-26-Warehouse|Weekly planning meeting with core Warehouse developers]] || Meeting notes || March 20th, 2018 ||
|| [[https://pyfound.blogspot.com/2018/03/warehouse-all-new-pypi-is-now-in-beta.html|Warehouse: All New PyPI is now in beta]] || Blog post || March 26th, 2018 ||
|| [[https://blog.python.org/2018/03/the-all-new-python-package-index-is-now.html|The all new Python Package Index is now in beta at pypi.org]] || Blog post || March 26th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-March/032100.html|beta, pythonhosted docs, PEP 541]] || Mailing list post || March 28th, 2018 ||
|| [[PackagingWG/2018-04-02-Warehouse|Early April planning meeting with core Warehouse developers]] || Meeting notes || April 2nd, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032120.html|PyPI/Warehouse update: new advice &amp; launch, shutdown dates]] || Mailing list post || April 3rd, 2018 ||
|| [[PackagingWG/2018-04-10-Warehouse|Mid-April planning meeting with core Warehouse developers]] || Meeting notes || April 10th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032143.html|PyPI/Warehouse (short) weekly report: Progress towards launch milestone]] || Mailing list post || April 10th, 2018 ||
|| [[https://mail.python.org/pipermail/distutils-sig/2018-April/032154.html|Summary of PyPI overhaul in new LWN article]] || Mailing list post || April 11th, 2018 ||
|| [[https://status.python.org/incidents/mgjw1g5yjy5j|Next Generation PyPI rollout incident report]] || Statuspage report || April 16th, 2018 ||
|| [[https://blog.python.org/2018/04/new-pypi-launched-legacy-pypi-shutting.html|New PyPI launched, legacy PyPI shutting down April 30]] || Blog post || April 16th, 2018 ||
|| [[PackagingWG/2018-04-17-Warehouse|Post-launch planning with core Warehouse developers]] || Meeting notes || April 17th, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/MBa5300VlI8|Warehouse/PyPI update: launch, project wrapup approaching]] || Mailing list post || April 18th, 2018 ||
|| [[PackagingWG/2018-04-23-Warehouse|Pre-legacy-shutdown planning with core Warehouse developers]] || Meeting notes || April 23rd, 2018 ||
|| [[https://groups.google.com/forum/#!topic/pypa-dev/zzaTiAoQrA0|PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding]] || Mailing list post || April 24th, 2018 ||
|| [[https://status.python.org/incidents/ptvp1wnn0jmq|Python legacy sunsetting]] || Statuspage report || April 30th, 2018 ||
|| [[https://mail.python.org/mm3/archives/list/distutils-sig@python.org/thread/YREMU56QKRMTTFBFVFJ2B4EHOEKOJZFJ/|legacy.pypi.org shutdown notice]] || Mailing list post || April 30th, 2018 ||
|| [[PackagingWG/2018-04-30-Warehouse|End-of-project conference call]] || Meeting notes || April 30th, 2018 ||
|| [[https://mail.python.org/mm3/archives/list/distutils-sig@python.org/message/EUCKR3LP6WSH3ZY3YHIXDHYHF6R3HFJE/|Final weekly report: legacy is shut down]] || Mailing list post || May 1, 2018 ||

Packaging Working Group

The Packaging Working Group is a work group of the Python Software Foundation.

Agenda

The purpose of this working group is to support the larger efforts of improving and maintaining the packaging ecosystem in Python through fundraising and disbursement of raised funds. It largely focuses on efforts such as PyPI, pip, packaging.python.org, setuptools, and cross-project efforts.

Resources

  • Discussion: Slack and mailing list. The archives are set to private since there is voting.

  • Accounting: We rely on the PSF's donation and accounting mechanisms to raise funds and disburse them to the selected recipients.

  • Project ideas: Fundable Packaging Improvements

Governance

Decisions on what fundraising and projects/efforts to support will be done by a simple majority and in the case of a tie, will escalate to the PSF Board. See the PSF Packaging WG Charter.

Administration and Contact

To contact the Packaging WG, email Ewa Jodlowska.

Members

  • Donald Stufft
  • Ewa Jodlowska
  • Nick Coghlan
  • Ernest W. Durbin III
  • Thea Flowers
  • Sumana Harihareswara
  • Nicole Harris
  • Dustin Ingram
  • Kenneth Reitz
  • Nathaniel J. Smith
  • Jacqueline Kazil (non-voting observer from PSF board)
  • Eric Holscher (non-voting observer from PSF board)
  • Laura Hampton (non-voting member)
  • Jannis Leidel (non-voting observer from PSF board)
  • (others will be added as they accept their invitation to the WG)

Meetings

As needed.

Current Projects

Fundraising

The Packaging Working Group is seeking sponsorships and grants to raise funds for Fundable Packaging Improvements.

Sprints

We run PackagingSprints at conventions and as standalone events. We're open to companies and organizations hosting sprints and work weeks to help us move packaging forward; get in contact with a Working Group member.

Warehouse: Facebook gift

The Packaging Working Group applied for and is receiving a gift from Facebook to implement & deploy security features for Warehouse (PyPI's codebase).

Meetings and status updates:

Meeting/update

Type

Date

Scoping Facebook-funded work

Meeting notes

June 20th, 2019

Announcement of Request for Information

Blog post

August 28th, 2019

Announcement of Request for Proposals

Blog post

September 25th, 2019

Kickoff - 2019 Q4 RFP Milestone 2 - Automated Detection of Malicious Uploads

Meeting notes

December 11th, 2019

Dependency resolver for pip

The Packaging Working Group applied for and is receiving funding to work in 2020 on the design, implementation, and rollout of pip's next-generation dependency resolver. The donors funding this work are the Chan Zuckerberg Initiative (USD$200,000) and Mozilla Open Source Support (USD$207,000).

Meetings and status updates:

Meeting/update

Type

Date

Planning test infrastructure work

Meeting notes

January 23rd, 2020

Beginning to plan resolver work

Meeting notes

January 8th, 2020

Mozilla and Chan Zuckerberg Initiative to support pip

Blog post

December 4th, 2019

Seeking Developers for Paid Contract Improving pip

Blog post

November 11th, 2019

Past projects

Warehouse: OTF grant

The Packaging Working Group applied for and received a grant from the Open Technology Fund to implement & deploy security, localization, and accessibility improvements for Warehouse (PyPI's codebase).

Meetings and status updates from the OTF grant-funded project:

Meeting/update

Type

Date

Start using 2FA and API Tokens on PyPI

Blog post

January 17th, 2020

API tokens and all 2FA methods are out of beta

Forum post

January 17th, 2020

Concluding report on localisation and accessibility work

Forum post

October 8th, 2019

Early Sept. update on accessibility &amp; localisation work

Forum post

September 8th, 2019

Early September update on security work

Forum post

September 8th, 2019

Prioritizing and estimating security, l10n and a11y work

Meeting notes

August 29th, 2019

Inspect PyPI event logs to audit your account's and project's security

Blog post

August 15th, 2019

Early Aug. update on 2FA, API keys, audit log, &amp; a11y work

Forum post

August 6th, 2019

Prioritizing API token and 2FA issues

Meeting notes

August 2nd, 2019

Audit log design planning

Meeting notes

July 31st, 2019

PyPI now supports uploading via API token

Blog post

July 31st, 2019

preliminary announcement of API token beta

Forum post

July 25th, 2019

Mid-July update on 2FA, API keys, and a11y work

Forum post

July 17th, 2019

Early July update on 2FA, API keys, and a11y work

Forum post

July 3rd, 2019

API key design planning

Meeting notes

June 24th, 2019

PyPI Now Supports Two-Factor Login via WebAuthn

Blog post

June 18th, 2019

Early June update on WebAuthn and accessibility work

Forum post

June 8th, 2019

Initial a11y and i18n planning

Meeting notes

June 7th, 2019

Use two-factor auth to improve your PyPI account's security

Blog post

May 30th, 2019

Late May update on TOTP and WebAuthN work

Forum post

May 22nd, 2019

PyPI two-factor auth (2FA) trial May 3-20

Mailing list post

May 2nd, 2019

(cross-post) PyPI two-factor auth (2FA) trial May 3-20

Forum post

May 2nd, 2019

Early April update on work and request for advice

Forum post

April 3rd, 2019

PyPI security work: multifactor auth progress &amp; help needed

Forum post

March 22nd, 2019

Prioritizing extant security issues

Meeting notes

March 22nd, 2019

Starting security, a11y, &amp; i18n improvements to PyPI for 2019

Blog post

March 13th, 2019

Kickoff planning meeting with grant-funded team

Meeting notes

March 11th, 2019

Warehouse rollout

The Packaging Working Group supported the implementation & deployment of Warehouse (PyPI 2.0) to replace the legacy code base that powered legacy PyPI. Announced on PSF blog in January 2016; see its history in this April 2018 LWN article.

Meetings and status updates from the MOSS-funded project:

Meeting/update

Type

Date

PSF announcement of $170,000 MOSS award to improve sustainability of PyPI

Blog post

November 27, 2017

Kickoff meeting

Meeting notes

Monday, Dec. 4, 2017

Kickoff/milestone update

Mailing list post

Thursday, Dec. 7, 2017

Developer experience audit walkthrough

in-person meeting

Tuesday, December 12, 2017

Maintainer MVP milestone bug triage

Meeting notes

Tuesday, Dec. 19, 2017

Maintainer MVP milestone schedule discussion

Meeting notes

January 10, 2018

Mid-January progress

Mailing list post

Jan. 15, 2018

Role management and welcoming first-time contributors

Mailing list post

Jan. 23, 2018

Standup, bug triage, and milestone schedule discussion

Meeting notes

January 29, 2018

Late January progress

Mailing list post

Jan. 30, 2018

Standup, bug triage, milestone schedule discussion

Meeting notes

February 5, 2018

Warehouse update: still on track, new features

Mailing list post

Feb. 6, 2018

Standup/bug triage/milestone schedule update meeting

Meeting notes

Feb. 12th, 2018

Warehouse: package manager features &amp; question about advertising

Mailing list post

Feb. 13, 2018

Standup, bug triage, &amp; milestone schedule update meeting

Meeting notes

Feb. 20th, 2018

Warehouse: essential maintainer features &amp; next steps

Mailing list post

Feb. 21st, 2018

Standup, bug triage, and milestone schedule update meeting

Meeting notes

Feb. 26th, 2018

Python package maintainers, help test the new PyPI!

Blog post

Feb. 26th, 2018

Warehouse update: a week of testing, polish, &amp; infrastructure

Mailing list post

Feb. 27th, 2018

Planning meeting

Meeting notes

March 6th, 2018

PyPI &amp; Warehouse update: redirecting &amp; shutting down legacy by end of April

Mailing list post

March 7th, 2018

Core Warehouse developers' planning meeting

Meeting notes

March 12th, 2018

new stuff overview, beta next week, user tests, &amp; other Warehouse updates

Mailing list post

March 14th, 2018

Planning meeting with core Warehouse developers

Meeting notes

March 19th, 2018

PyPI/Warehouse: infrastructure hardening &amp; the CAPTCHA conundrum

Mailing list post

March 20th, 2018

Weekly planning meeting with core Warehouse developers

Meeting notes

March 20th, 2018

Warehouse: All New PyPI is now in beta

Blog post

March 26th, 2018

The all new Python Package Index is now in beta at pypi.org

Blog post

March 26th, 2018

beta, pythonhosted docs, PEP 541

Mailing list post

March 28th, 2018

Early April planning meeting with core Warehouse developers

Meeting notes

April 2nd, 2018

PyPI/Warehouse update: new advice &amp; launch, shutdown dates

Mailing list post

April 3rd, 2018

Mid-April planning meeting with core Warehouse developers

Meeting notes

April 10th, 2018

PyPI/Warehouse (short) weekly report: Progress towards launch milestone

Mailing list post

April 10th, 2018

Summary of PyPI overhaul in new LWN article

Mailing list post

April 11th, 2018

Next Generation PyPI rollout incident report

Statuspage report

April 16th, 2018

New PyPI launched, legacy PyPI shutting down April 30

Blog post

April 16th, 2018

Post-launch planning with core Warehouse developers

Meeting notes

April 17th, 2018

Warehouse/PyPI update: launch, project wrapup approaching

Mailing list post

April 18th, 2018

Pre-legacy-shutdown planning with core Warehouse developers

Meeting notes

April 23rd, 2018

PyPI update: legacy shutdown 30 April, new classifiers page, seeking funding

Mailing list post

April 24th, 2018

Python legacy sunsetting

Statuspage report

April 30th, 2018

legacy.pypi.org shutdown notice

Mailing list post

April 30th, 2018

End-of-project conference call

Meeting notes

April 30th, 2018

Final weekly report: legacy is shut down

Mailing list post

May 1, 2018

PackagingWG (last edited 2025-01-13 07:09:39 by AlyssaCoghlan)

Unable to view page? See the FrontPage for instructions.